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REMARKS 

Figures 6 and 7 have been amended to correctly identify the "BANK INTERFACE" and the 
"TBV DATA." The Examiner has objected to Figure 1 as using reference numeral 108 and 222 to 
indicate the same element. Applicant believes that the Examiner meant to object to Figure 6 and not 
Figure 1 which does not contain reference numeral 222. 

Claims 24, 27 and 53 have been amended as suggested by the Examiner. Claim 27 has been 
amended to correct a typographical that would have been obvious to one skilled in the art. Claims 
24 and 53 have been amended to remove reference numerals from the claims. 

Clams 18 and 35 stand rejected under 35 USC 1 12, first paragraph. Applicant respectfully 
traverses this rejection. The Examiner asserts that applicant's previous amendments to claims 18 
and 35, in which a plurality of hashes corresponding to a plurality of browser components at a first 
point in time are compared to a plurality of hashes corresponding to a plurality of browser 
components running on a computer at a second point in time, resulted in claims that were not 
described in the specification in such a way as to reasonably convey to one skilled in the art that the 
inventor had possession of the claimed invention. The Examiner appears to be basing his assertion 
only on the original claims and not on the specification. 

Applicant respectfully directs the Examiner to the following portions of the specification 
that detail the features of claims 1 8 and 35 related to creating hashes of the browser components: 
page 2, lines 14-20; page 6, lines 13-18; page 6, line 34, through page 7, line9; page 7, lines 25-32; 
page 9, lines 28-35; and page 11, line 31, through page 12, line 3. 

Claims 1, 18, 35, 59 and 68 stand rejected under 35 USC 101. Applicant has amended 
claims 1,18, 35, 50 and 68 to recite statutory subject matter, thereby overcoming this rejection. 

Claims 1-17 stand rejected under 35 USC 102(e) over Orrin (U.S. Patent Publication No. 
202/0128940). Applicant traverses this rejection. 
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Orrin does not disclose or suggest verifying the authenticity of components running in a 
browser environment. Orrin does disclose digitally signing documents to ensure their 
trustworthiness. Orrin also discloses that a browser may contain a built-in feature to digitally sign 
documents. Orrin does not, however, disclose or suggest including a second digital signature used 
to verify the trustworthiness of the browser itself as recited in claim 1 . 

Orrin only discloses a single signature, and that signature is used only to verify the 
trustworthiness of the signed document. However, as noted in applicant's specification, such 
systems are untrustworthy in that the browser itself may become corrupted. A corrupted browser 
may be used to issue signed documents that the browser's owner does not intend to issue. 
Applicant's invention addresses this problem by verifying the trustworthiness of the browser itself, 
and by including a second digital signature verifying the browser's trustworthiness along with 
digitally signed documents. Applicant respectfully submits that the Examiner has improperly 
construed Orrin' s disclosure of digitally signing a document as somehow also verifying the browser 
itself; such a feature is not disclosed or suggested by Orrin. Therefore, Orrin not disclose or suggest 
all of the features recited in claim 1. Accordingly, claim 1 is allowable over Orrin. 

Claims 2-17 depend from allowable claim 1 and are therefore also allowable. 

Claims 1 8-49 stand rejected under 35 USC 102(e) over Shear (U.S. Patent No. 6,292,569). 
Claims 50-86 stand rejected under 35 USC 103(a) over Shear. Applicants traverse these rejections. 

Initially, applicant notes that the page 9, section 7, of the Action states that claims 18-49 
were rejected under 35 USC 102(e) as being anticipated by Shear "in view of US Patent 5,958,051 
to Renaud et al." Applicant respectfully submits that it is improper to combine references in a 
rejection under 35 USC 102(e) in such a manner. Because the Examiner does not further cite to 
Renaud in the accompanying text of the Action, applicant assumes that the inclusion of Renaud was 
a typographical error. However, if the Examiner intended to reject the claims under 35 USC 103, 
the applicant traverses this rejection on the Examiner's failure to provide a motivation to combine 
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the references. Accordingly, the following remarks are directed to the rejection of claims 18-49 
under 35 USC 102(e) over Shear. 

Claim 18 recites transmitting a second set of hashes to a computer which compares a first set 
of hashes to the second set of hashes. This feature is not disclosed or suggested by Shear. Shear 
discloses a method and system for determining if the integrity of a load module that has been 
compromised (col. 12, lines 17-54). In Shear, an encrypted verified hash of a load module is sent to 
a protected processing environment along with the load module itself The protected processing 
environment then decrypts the verified hash of the load module, generates a second hash of the load 
module and compares it to the verified hash to ensure that the load module has not been altered or 
substituted during transmission. This differs from applicant's invention in at least two significant 
respects. 

First, in Shear, the second hash is never transmitted; it is generated and compared at the 
same microprocessor. This feature is contrary to applicant's invention where the second hash is 
transmitted to a trusted verifier which is used to determine the trustworthiness of a browser. 

Second, Shear does not disclose generating a hash of a browser or browser components that 
are running on a computer at a second point in time. Shear discloses generating a single hash of a 
load module upon receipt of the load module prior to running the load module. To run the load 
module prior to verifying its validity is contrary to the purpose of Shear, which is to validate the 
load module prior to running it in the protected processing environment. Such a system is used to 
ensure that the load module has not been tampered with prior to its operation such that a 
compromised program is not executed. This is contrary to applicant's invention in which the 
browser is verified to ensure that a digital signature attached to a document was created by a 
validated browser. Applicant's invention is not concerned with the validity of an executable 
program to be run in the future (such as a load module), instead applicant's invention is concerned 
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with determining the validity of a digitally signed document by ensuring the validity of the signature 
and the trustworthiness of the browser that sent or created the signature in the past. 

Shear does not disclose all of the features recited in claim 18, which is therefore allowable. 
Claims 35, 50 and 68 recite similar features to those discussed above, and are therefore also 
allowable. Claims 19-34, 36-49, 51-67 and 69-86 depend from allowable claims and are allowable 
at least due to their respective dependencies. 



to be in immediate condition for allowance. Accordingly, the Examiner is respectfully requested to 
withdraw the outstanding rejection of the claims and to pass this application to issue. If it is 
determined that a telephone conference would expedite the prosecution of this application, the 
Examiner is invited to telephone the undersigned at the number given below. 



other relief is required, applicant petitions for any required relief, including extensions of time, and 
authorizes the Commissioner to charge the cost of such petitions and/or other fees due in connection 
with the filing of this document to Deposit Account No. 03-1952 referencing docket no. 
3880220018. 



In view of the above, each of the presently pending claims in this application is believed 



In the event the U.S. Patent and Trademark office determines that an extension and/or 



Dated: September 2, 2005 



Respectfully submitted. 




Deborah S. Gladstein 



Registration No. 43,636 



MORRISON & FOERSTER LLP 



1650 Tysons Blvd, Suite 300 
McLean, Virginia 22102 
(703) 760-7301 Telephone 
(703) 760-7777 Facsimile 
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AMENDMENTS 

In the Drawings: 

Replace the original drawing sheets with the attached drawing sheets. 

Figure 6 has been amended to correctly identify the "BANK INTERFACE" using reference 
number 222. 

Figure 7 has been amended to correctly identify the "BANK INTERFACE" using reference 
number 222, and to correctly identify the "TBV DATA" using reference numeral 232. 
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